Lucene search
+L

4117 matches found

CNNVD
CNNVD
added 2026/05/27 12:00 a.m.23 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECT24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymbCONNECT24 is an internal...

7.1CVSS5.9AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.18 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:00 a.m.20 views

MB Connect Line mbCONNECT24和MB Connect Line mymbCONNECT24 SQL注入漏洞

MB Connect Line mbCONNECT24 and MB Connect Line mymb CONNECTION24 are products of the German company MB Connect Line. MB Connect Line mbCONNECT24 is a remote service portal. This product supports features such as remote access, data recording, and alerts. MB Connect Line mymb CONNECTION24 is an...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.38 views

PT-2026-43787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system where a double decrement of the dirty clusters counter occurs during file system shutdown. This happens in the error path between the ext4 mb mark...

7.8CVSS5.4AI score0.00146EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/05/22 7:44 a.m.25 views

Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026)

Overview Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises contain multiple vulnerabilities listed below. Relative path traversal in Apex One server CWE-23 - CVE-2026-34926 The only product that could be vulnerable to this exploit is TrendAI Apex One On Premise...

7.8CVSS6.1AI score0.12682EPSS
SaveExploits0References14
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.10 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ARM: fixed the cacheflush issue with PAN. It appears that the cacheflush syscall became corrupted when the LPAE PAN mechanism was implemented. User access was not enabled during the cache maintenance process, which caused the iss...

5.5CVSS5.3AI score0.00177EPSS
SaveExploits0References2
HackRead
HackRead
added 2026/05/19 4:37 p.m.20 views

How Parts Inventory Management Software Fixes Inventory Challenges

Why do maintenance teams struggle? Is it because they lack skills? Or do they need more advanced resources?…...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/18 6:57 p.m.31 views

CVE-2026-23926

A flaw was found in Zabbix. An authenticated administrator can inject a malicious script into a maintenance period. When another user views the tooltip for this maintenance period in the Host navigator widget, the script executes. This Cross-Site Scripting XSS vulnerability allows the attacker to...

7.3CVSS5.8AI score0.00285EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/18 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-23926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated non-super administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that...

7.3CVSS8AI score0.00285EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:00 a.m.11 views

Zabbix 7.0.x < 7.0.24 / 7.4.x < 7.4.8 XSS (ZBX-27758)

The version of Zabbix Server installed on the remote host is prior to 7.0.24, 7.4.8. It is, therefore, affected by a stored cross-site scripting XSS vulnerability. An authenticated non-super administrator can create a maintenance period with a JavaScript payload that is executed by any user that...

7.3CVSS5.7AI score0.00285EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.18 views

GitLab 安全漏洞

GitLab is an end-to-end software development platform provided by the American company GitLab. It includes built-in features such as version control, issue tracking, code review, and CI/CD Continuous Integration and Delivery. Security vulnerabilities exist in versions of GitLab EE from 16.10 to...

2.7CVSS5.9AI score0.00268EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/13 6:30 p.m.20 views

EUVD-2026-29907

Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity...

6.8CVSS5.8AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/13 6:30 p.m.15 views

EUVD-2026-29903

Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00093EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2026/05/13 12:00 a.m.27 views

Garmin WDU 安全漏洞

Garmin WDU is a wireless data unit developed by Garmin Corporation, designed for data updates and maintenance of aviation electronic devices. Versions 1.1.6 and 2.5.0 of Garmin WDU contain security vulnerabilities. These vulnerabilities stem from the ability to allow symbolic link attacks, which...

7.5CVSS5.8AI score0.00387EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/12 3:31 a.m.22 views

EUVD-2026-29360

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the...

6.3CVSS5.8AI score0.00216EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/12 3:16 a.m.22 views

CVE-2026-40133

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the...

6.3CVSS0.00216EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/12 2:21 a.m.18 views

CVE-2026-40133

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the...

6.3CVSS5.8AI score0.00216EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/12 2:21 a.m.15 views

CVE-2026-40133 Missing Authorization check in SAP S/4HANA Condition Maintenance

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the...

6.3CVSS5.8AI score0.00216EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/12 2:21 a.m.32 views

CVE-2026-40133

SAP S/4HANA Condition Maintenance is affected by a missing authorization check, enabling an authenticated attacker to view and modify condition table records. The impact is described as low for confidentiality, integrity, and availability. The CVE entries (CVE-2026-40133) reference SAP S/4HANA Co...

6.3CVSS5.8AI score0.00216EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/12 2:21 a.m.56 views

CVE-2026-40133 Missing Authorization check in SAP S/4HANA Condition Maintenance

Due to missing authorization check in SAP S/4HANA Condition Maintenance, an authenticated attacker could gain unauthorized access to view and modify condition table records, resulting in low impact on the confidentiality and integrity of the data. Additionally, this vulnerability may prevent the...

6.3CVSS0.00216EPSS
SaveExploits0References2
Rows per page
Query Builder